How to set up an alert that runs all the time except between 2 AM to 2:05 AM?

[nmohammed]

We wanted to schedule an alert to run all the time, since this is to monitor our app pools going down frequently, until we fix it.

The alert is supposed to run all the time, except at 2:00 AM when there is a schedule app recycle and happens in a minute. We would like to have alerts disabled between 2:00 - 2:05 AM.

My search :

index="f5" (pool-abc OR pool-xyz) "monitor status down"

Thanks

[somesoni2]

Have a look at this post.

https://answers.splunk.com/answers/69820/search-to-only-include-business-hours-and-exclude-weekends....